Docker hardening + first-run fixes

src/db/schema.ts

@@ -65,7 +65,7 @@ export const users = pgTable('users', {
   movedFrom: text('moved_from'), // Old actor URL if this account migrated here
   migratedAt: timestamp('migrated_at'), // When the migration occurred
   // User-owned S3-compatible storage - required for new users
-  storageProvider: text('storage_provider'), // 's3', 'r2', 'b2', 'wasabi', 'contabo', etc
+  storageProvider: text('storage_provider'), // 's3', 'r2', 'b2', 'wasabi', 'contabo'
   storageEndpoint: text('storage_endpoint'), // S3 endpoint URL (optional for AWS)
   storagePublicBaseUrl: text('storage_public_base_url'), // Public URL for viewing files (required for R2, B2, Contabo)
   storageRegion: text('storage_region'), // Region (e.g., 'us-east-1')
@@ -919,8 +919,8 @@ export const chatConversationsRelations = relations(chatConversations, ({ one, m
 
 /**
  * Individual chat messages within conversations.
- * Messages are encrypted end-to-end using recipient's public key.
- * Sender also gets a copy encrypted with their own public key.
+ * Messages are stored as plain text on the server.
+ * Both sender and recipient can view the message content.
  */
 export const chatMessages = pgTable('chat_messages', {
   id: uuid('id').primaryKey().defaultRandom(),